High severity8.8NVD Advisory· Published Nov 22, 2023· Updated Jun 17, 2026
CVE-2023-48107
CVE-2023-48107
Description
Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted file to the mz_path_has_slash function in the mz_os.c file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:zlib-ng:minizip-ng:4.0.2:*:*:*:*:*:*:*
- zlib-ng/minizip-ngdescription
Patches
Vulnerability mechanics
References
5- github.com/zlib-ng/minizip-ng/issues/739nvdExploitIssue TrackingPatch
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2P3BFGECWPSK5RYDI5GCSW6N2VIXBTUO/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4BNF4ZDYQZP4JWEY6DBSYKALXQC5QM4/nvd
- lists.fedoraproject.org/archives/list/[email protected]/message/2P3BFGECWPSK5RYDI5GCSW6N2VIXBTUO/nvd
- lists.fedoraproject.org/archives/list/[email protected]/message/X4BNF4ZDYQZP4JWEY6DBSYKALXQC5QM4/nvd
News mentions
0No linked articles in our index yet.